www-cad.cea.fr

- COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES -

Issued by GEANT OV RSA CA 4

About this certificate

This digital certificate with serial number bc:c5:2a:de:c4:59:33:65:31:a0:a6:33:b1:cc:0b:b5 was issued on by GEANT Vereniging.

This certificate is currently not expired, we haven't checked the revocation status of this certificate but you can do this simply on revocationcheck.com. If we have found any compliance issues with this certificate they will be shown below. I hope this certificate review is providing you the detailed information in a simple form you where looking for.


We have idenified some issues with this certificate:
  • Subscriber Certificate: commonName is deprecated. (BRs: 7.1.4.2.2)

COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES

Organization: COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES
State / Province: Paris
Country: FR

GEANT Vereniging

Organization: GEANT Vereniging
Country: NL

This certificate will expire on

Certificate Details

Serial Number (hex): bc:c5:2a:de:c4:59:33:65:31:a0:a6:33:b1:cc:0b:b5
Serial Number (int): 250918615199317875715894140769137331125
Serial Number lenght: 128 bits, 16 octets

SubjectKeyId: af:c0:2e:0f:ed:3a:62:ad:7b:6e:27:01:46:8d:7c:2d:d4:af:83:01
AuthorityKeyId: 6f:1d:35:49:10:6c:32:fa:59:a0:9e:bc:8a:e8:1f:95:be:71:7a:0c

Fingerprint (sha1): 89:48:0b:06:36:ae:2c:50:c1:6d:a7:02:55:06:73:33:91:62:1b:16
Fingerprint (sha256): 1c:45:38:89:1b:32:73:3a:bb:be:a9:5a:b5:b0:db:f5:55:2e:92:f7:9d:38:03:c0:5b:de:0b:8f:6a:87:25:05

Issuing Certificate URL: http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt

Revocation information

OCSP Server: http://GEANT.ocsp.sectigo.com
CRL Distribution Point: http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl

Check the revocation status for certificate www-cad.cea.fr

1

DNS Names

0

Email Addresses

0

IP Addresses

Advanced Certificate Properties

Tehnical certificate details for www-cad.cea.fr

Public Key Algorithm

RSA

Key Size

2048

Signature Algorithm

SHA384 with RSA

Key Usage

Digital Signature
Key Encipherment

Extended Key Usages

Server Authentication
Client Authentication

Extensions

10 extensions
No unhandled critical extensions

CA Certificate

This is not a CA certificate

Subject Alternative Names

www-cad.cea.fr

Other certificates including the domain name cea.fr

(limited to 100 certificates)
joliot.cea.fr
projet-si-map.cea.fr
projet-sip.cea.fr
drf-internet.extra.cea.fr
p-shfj-gera-bdd.partenaires.cea.fr
sogreen-project.cea.fr
veille-dem.cea.fr
compta-dev.admin.ccc.cea.fr
lha-dmt2.cea.fr
projet-thermacem.cea.fr
infos-salaries.cea.fr
www-centre-saclay.cea.fr
agueil.eole.ccc.cea.fr
naiades-project.cea.fr
maintenance-digiteo.cea.fr
irig.cea.fr
q4-hilumi.cea.fr
www.mobilite-interne.cea.fr
afh.cea.fr
ged-extra-sacm.cea.fr
eu-aims.cea.fr
vpn.cea.fr
drf-upsac.cea.fr
hg2epx.cea.fr
vpn.cea.fr
projet-li2cem.cea.fr
montchretien02.admin.ccc.cea.fr
www.theses-postdocs.cea.fr
baudelaire02.admin.ccc.cea.fr
sarmenti-proposal-project.cea.fr
letsense.cea.fr
qflag.cea.fr
vpn.cea.fr
cirse-smtp-out.extra.cea.fr
talk3.extra.cea.fr
afh.cea.fr
events-list.partenaires.cea.fr
lotus.cea.fr
activage-intervention.cea.fr
communaute-lacrs.cea.fr
www-plat4m.cea.fr
anastasia2-project.cea.fr
instn.cea.fr
modsecaero.cea.fr
talents.cea.fr
e-i2ir-test.cea.fr
www-ged-demeterres.cea.fr
herschel-project.cea.fr
wiki.admin.ccc.cea.fr
bioproj.cea.fr
madmax.cea.fr
partage-dpad.cea.fr
chat.admin.ccc.cea.fr
gopv-project.cea.fr
www.emploi.cea.fr
webmail-e.cea.fr
transmil-project.cea.fr
integral-project.cea.fr
projet-li2cem.cea.fr
webmail-ext.qualif.cea.fr
sfcg-nuvia.cea.fr
spica-b-bop.cea.fr
rapport-scientifique-leti.cea.fr
projet-optifroid.cea.fr
integral-project.cea.fr
p-i2ipp-racine-collab.qualif-p.cea.fr
bts-frama-c.cea.fr
datadrf.cea.fr
webconfgre.cea.fr
p-i2i-test.partenaires.cea.fr
imagen2.cea.fr
garbin.eole.ccc.cea.fr
modsecaero.cea.fr
nectarcam-irfu.cea.fr
eu-aims.cea.fr
projet-labo-commun-masen.cea.fr
jobs.eurotalents.cea.fr
gouvernance-ca.cea.fr
www-cad.cea.fr
these-is.cea.fr
projet-entech-se.cea.fr
p-i2i-personnes.partenaires.cea.fr
www-leti.cea.fr
qgp-admin.cea.fr
solhyshare-project.cea.fr
compta-rct.admin.ccc.cea.fr
codev-tuleap.cea.fr
jacob.cea.fr
www-fr.ccc.cea.fr
projet-altess.cea.fr
i-id.cea.fr
farou.eole.ccc.cea.fr
com-mar-collab.cea.fr
projet-comepos.cea.fr
cbrn.partenaires.cea.fr
www-cadarache.cea.fr
oaasis.cea.fr
s2lam.cea.fr
www-dmt-rm2-far.cea.fr
phoenix.cea.fr

Certificate

The complete raw certificate details for www-cad.cea.fr in PEM and ASN.1 format.

Certificate (PEM)

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Public Key (PEM)

-----BEGIN PUBLIC KEY-----
MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxALm1Q7+gvpdaQn72GK7
rCHFMjPTZCQN/Xe1xFkmobDAXzSxmeiVS9+v1mYo5+CK/suS755+4O9xy0WXr4pj
WAgcLXH34v6kepSCZyymyhf4KCf1eBKulCeQVvNNb59HPIY3kxX9iUCwBkwASWRv
x4iPs8I5cv+5jpATldcoV1OZxNojgV0PAyHPJAmucqk0V7/0uzmy7eT/6+HpiYCY
sekWS87IL5lIpO7aroqHov3xcG7PFEvzh5iLhIl0XbLXWr8NtwtL4XVQyuRmW8EM
B6rtGhKpHXeel7SorGJaG/MFQxu8ACDnh+gNDLlKUrfp7QtDISeImGgO0I3OCrRI
tQIDAQAB
-----END PUBLIC KEY-----

ASN.1 decoded

 [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . [c:0|t:2|false] INTEGER 2
 . . . . . . . . [c:0|t:2|false] INTEGER 250918615199317875715894140769137331125
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'NL'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT Vereniging'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'GEANT OV RSA CA 4'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2023-06-22 00:00:00 +0000 UTC
 . . . . . . . . . . . . [c:0|t:23|false] UTCTime 2024-06-21 23:59:59 +0000 UTC
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.6 (countryName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'FR'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.8 (stateOrProvinceName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'Paris'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.10 (organizationName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'COMMISSARIAT A L'ENERGIE ATOMIQUE ET AUX ENERGIES ALTERNATIVES'
 . . . . . . . . . . . . [c:0|t:17|true] SET, SET OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.4.3 (commonName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:19|false] PrintableString 'www-cad.cea.fr'
 . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.1 (rsaEncryption)
 . . . . . . . . . . . . . . . . [c:0|t:5|false] NULL 
 . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (2160 bits)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 24744138649284104195573288098907915082748924553264709256892150003187957633766186998308178891955828106070174426960299225670776430671852160910610173419911436728404755574393551434328490158334489396034439593178847162857523826978115252872236367691679419310859275689104845330631702445635886142396397590786919629137302936940154768951183746479731267653704856355033319295347171610613295147136409344367011645369601375889966671349087884882555392462485917638567179013177024248449737560664571246209973797709623949723850354803510319560464625552667805989573620892800960254338644801571304834513248126754217150983490045615904082118837
 . . . . . . . . . . . . . . . . . . . . [c:0|t:2|false] INTEGER 65537

 . . . . . . . . [c:2|t:3|true] ORAddress 
 . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.35 (authorityKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (24 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|false] OtherName 6f1d3549106c32fa59a09ebc8ae81f95be717a0c
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.14 (subjectKeyIdentifier)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (20 bytes)
							afc02e0fed3a62ad7b6e2701468d7c2dd4af8301
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.15 (keyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (4 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:3|false] BIT STRING (3 bits)
							05a0
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.19 (basicConstraints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:1|false] BOOLEAN true
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (2 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.37 (extKeyUsage)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (22 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.1 (serverAuth)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.3.2 (clientAuth)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.32 (certificatePolicies)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (66 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.6449.1.2.2.79
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.2.1 (cps)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:22|false] IA5String 'https://sectigo.com/CPS'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.23.140.1.2.2 (Organization Validation Certificates Policy)
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.31 (cRLDistributionPoints)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (56 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:0|true] OtherName 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crl.sectigo.com/GEANTOVRSACA4.crl'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.1.1 (authorityInfoAccess)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (105 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.2 (caIssuers)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.crt.sectigo.com/GEANTOVRSACA4.crt'
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.5.5.7.48.1 (ocsp)
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:6|false] IA5String 'http://GEANT.ocsp.sectigo.com'
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.3.6.1.4.1.11129.2.4.2
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (365 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (361 bytes)
							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
 . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 2.5.29.17 (subjectAltName)
 . . . . . . . . . . . . . . . . . . . . [c:0|t:4|false] OCTET STRING (18 bytes)
 . . . . . . . . . . . . . . . . . . . . . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . . . . . . . . . . . . . . . . . . . . . [c:2|t:2|false] IA5String 'www-cad.cea.fr'
 . . . . [c:0|t:16|true] SEQUENCE, SEQUENCE OF 
 . . . . . . . . [c:0|t:6|false] OBJECT IDENTIFIER 1.2.840.113549.1.1.12 (sha384WithRSAEncryption)
 . . . . . . . . [c:0|t:5|false] NULL 
 . . . . [c:0|t:3|false] BIT STRING (4096 bits)
		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